Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/987c33a4-a595-3c84-b5e2-21d11ea2f5d3.roa
File: 987c33a4-a595-3c84-b5e2-21d11ea2f5d3.roa (raw, json)
Hash identifier: b6aqprOZz+kLpH1glVCjAElQb1sTTJnuyD6e9SWdbRM=
Subject key identifier: 8F:F9:7E:9D:98:D7:E6:B3:67:2E:9F:06:D8:10:A1:7B:65:E0:20:85
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926B72777BE31B147013D20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/987c33a4-a595-3c84-b5e2-21d11ea2f5d3.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 46491
IP address blocks: 74.82.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b7:27:77:be:31:b1:47:01:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=712e5b08-e061-418d-aa41-f059398991cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:7a:c4:61:93:a1:83:e2:35:e2:85:36:ff:
ee:e8:b7:40:1c:a0:d0:97:81:da:d4:5c:2e:9a:1a:
00:43:3b:51:c4:88:43:01:c7:a2:9c:8c:b8:12:4e:
90:5e:a8:02:7b:48:97:da:2f:6a:99:0b:cd:30:b8:
75:19:a9:97:01:13:bb:9a:e9:2d:8d:bb:2f:64:81:
50:1d:71:2b:5a:81:51:cf:72:81:6f:48:f6:70:c6:
3a:a9:23:80:ef:db:c1:f6:6c:4c:19:1c:c7:f6:b2:
08:34:08:8e:48:95:20:94:f5:ff:7c:5c:e0:51:7b:
d8:4f:3d:b3:cf:d9:c4:fd:2f:9e:79:39:f0:3d:7d:
ed:42:a3:47:15:01:5d:15:d1:fb:94:12:cf:66:e5:
4f:82:95:b4:de:3e:24:66:07:52:9b:b0:82:d3:bf:
14:c3:ff:d8:94:09:2a:4f:b6:bd:23:db:9a:67:9a:
f5:40:8a:82:bb:a5:2f:31:16:87:15:99:23:0a:13:
35:e5:96:d0:59:e7:8a:bd:60:59:66:3b:5a:15:7b:
cb:ce:28:5f:f2:a4:39:91:73:bd:9e:ba:ef:3b:0c:
5d:05:96:b5:61:c4:bf:8d:59:eb:13:48:51:ad:5f:
2f:34:74:40:6c:d9:58:6b:e1:c6:a7:ce:2a:af:f4:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:7E:9D:98:D7:E6:B3:67:2E:9F:06:D8:10:A1:7B:65:E0:20:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/987c33a4-a595-3c84-b5e2-21d11ea2f5d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a8:95:11:ea:c7:6a:a6:53:e7:c5:2a:63:fb:23:b9:54:12:
c1:68:cc:96:e8:c4:49:11:a6:38:c0:74:27:97:98:52:5a:bc:
0a:d8:50:3b:11:48:81:18:7a:6b:0d:9a:a3:e7:b8:fa:9b:b1:
f1:9f:0d:3a:a2:1c:a1:0e:42:b7:be:27:fe:b9:fb:cd:58:b7:
89:6c:b7:6f:6a:57:01:d7:96:ec:b7:f8:40:04:c6:7d:a1:d5:
21:62:54:cd:99:81:a0:f0:85:b5:5e:bf:43:33:3e:4d:52:33:
36:f9:31:81:d0:8e:e5:d3:6c:d2:a9:00:ee:5a:f7:d8:13:7b:
aa:a8:5c:58:da:cb:1e:cc:dd:91:e5:de:24:bc:a2:b2:04:8c:
b4:d1:3d:28:89:0c:99:c9:8d:75:ee:55:9a:04:fe:7e:b3:3c:
70:66:46:7b:09:c5:b4:f8:fa:71:f7:77:2c:97:32:76:50:e4:
93:aa:48:93:f1:eb:01:59:2e:67:e6:e1:ee:11:91:cf:c7:3e:
61:c1:e6:fc:cd:21:17:02:3c:40:e4:60:46:67:fa:b9:35:45:
4f:9d:40:a7:22:d1:af:ba:b1:57:05:d4:70:9b:d4:d7:12:7b:
b8:08:a9:88:b1:a1:45:97:b0:8e:b9:a8:3c:bb:87:12:a0:57:
c7:5a:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:45:15 2025 by rpki-client